@deepseek-harness-tui/dsh-tui 0.10.0 → 0.10.1

package/lib/types/adapter/kernel/diagnostics.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Kernel diagnostics surface.
+ *
+ * @internal P2: a snapshot formatter consumed by `/doctor` and local
+ * diagnostics. The richer `KernelRuntime.diagnosticSnapshot()` is the
+ * canonical kernel state surface; this helper remains for the legacy
+ * /doctor line shape. It never writes, registers, subscribes or mutates host
+ * capabilities.
+ */
+import type { HostDescriptorSnapshot } from '../ports/descriptor.js';
+import type { AdapterRuntimeOptions } from './runtime.js';
+export interface AdapterDiagnostics {
+    readonly runtime: AdapterRuntimeOptions;
+    readonly descriptor: HostDescriptorSnapshot;
+    readonly permissions: readonly string[];
+}
+export declare function collectAdapterDiagnostics(runtime: AdapterRuntimeOptions, descriptor: HostDescriptorSnapshot, permissions: readonly string[]): AdapterDiagnostics;
+//# sourceMappingURL=diagnostics.d.ts.map

package/lib/types/adapter/kernel/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../../src/adapter/kernel/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAA;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,UAAU,EAAE,sBAAsB,EAClC,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,kBAAkB,CAMpB"}

package/lib/types/adapter/kernel/diagnostics.js

@@ -0,0 +1,16 @@
+/**
+ * Kernel diagnostics surface.
+ *
+ * @internal P2: a snapshot formatter consumed by `/doctor` and local
+ * diagnostics. The richer `KernelRuntime.diagnosticSnapshot()` is the
+ * canonical kernel state surface; this helper remains for the legacy
+ * /doctor line shape. It never writes, registers, subscribes or mutates host
+ * capabilities.
+ */
+export function collectAdapterDiagnostics(runtime, descriptor, permissions) {
+    return Object.freeze({
+        runtime: Object.freeze({ ...runtime }),
+        descriptor,
+        permissions: Object.freeze([...permissions]),
+    });
+}

package/lib/types/adapter/kernel/driver-types.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared plain data types used by the Kernel and upstream driver contract.
+ *
+ * These are deliberately not Standard/Spec protocol definitions: they are the
+ * minimal coordinate/key shapes that drivers, kernel and descriptor plumbing
+ * need to agree on without upstream importing the Standard plane.
+ */
+export interface ContractCoordinate {
+    readonly apiVersion: string;
+    readonly kind: string;
+}
+export interface ContractRef extends ContractCoordinate {
+    readonly optional?: boolean;
+    readonly fallback?: string;
+}
+//# sourceMappingURL=driver-types.d.ts.map

package/lib/types/adapter/kernel/driver-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver-types.d.ts","sourceRoot":"","sources":["../../../../src/adapter/kernel/driver-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAY,SAAQ,kBAAkB;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B"}

package/lib/types/adapter/kernel/driver-types.js

@@ -0,0 +1,8 @@
+/**
+ * Shared plain data types used by the Kernel and upstream driver contract.
+ *
+ * These are deliberately not Standard/Spec protocol definitions: they are the
+ * minimal coordinate/key shapes that drivers, kernel and descriptor plumbing
+ * need to agree on without upstream importing the Standard plane.
+ */
+export {};

package/lib/types/adapter/kernel/host-facade.d.ts

@@ -0,0 +1,65 @@
+/**
+ * HostFacade: thin composition / identity entry over mounted Host Ports.
+ *
+ * P2 callers normally obtain this from `KernelRuntime.facade()`, which backs
+ * the descriptor port with the unified kernel lifecycle evidence.
+ * `facadeFromLegacy` remains only as a long-term compatibility fallback for
+ * bare/test compositions (outside P6 removal scope; owner: dsh-tui adapter).
+ * Hard rules:
+ * - It performs no business logic, no protocol translation, no capability
+ *   detection, no registry, and stores no mutable host state.
+ * - It is for TUI host-internal code only. External plugins continue to use
+ *   dsh-std / dsh-ecosystem-spec public protocol surfaces.
+ * - It only exposes Host Ports; admission, permission evaluation and ledger
+ *   writes are Kernel/Standard internal services and must never be exposed
+ *   as ordinary Host Ports.
+ */
+import type { HostDescriptorPort } from '../ports/descriptor.js';
+import type { HostPresentationPort } from '../ports/presentation.js';
+import type { HostWorkspacePort } from '../ports/workspace.js';
+import type { HostScenesPort } from '../ports/scenes.js';
+import type { HostSettingsPort } from '../ports/settings.js';
+import type { HostStatusPort, HostShortcutsPort, HostRenderersPort, HostThemesPort, HostToastPort, HostCommandTreesPort } from '../ports/extensions.js';
+import type { HostDecisionsPort } from '../ports/decisions.js';
+import type { HostChannelPort } from '../ports/channel.js';
+import { type AdapterMode } from './runtime.js';
+export interface HostFacade {
+    readonly descriptor: HostDescriptorPort;
+    readonly presentation?: HostPresentationPort;
+    readonly workspace?: HostWorkspacePort;
+    readonly scenes?: HostScenesPort;
+    readonly settings?: HostSettingsPort;
+    readonly status?: HostStatusPort;
+    readonly shortcuts?: HostShortcutsPort;
+    readonly renderers?: HostRenderersPort;
+    readonly themes?: HostThemesPort;
+    readonly toast?: HostToastPort;
+    readonly commandTrees?: HostCommandTreesPort;
+    readonly decisions?: HostDecisionsPort;
+    readonly channel?: HostChannelPort;
+}
+export interface HostFacadePorts {
+    readonly descriptor: HostDescriptorPort;
+    readonly presentation?: HostPresentationPort;
+    readonly workspace?: HostWorkspacePort;
+    readonly scenes?: HostScenesPort;
+    readonly settings?: HostSettingsPort;
+    readonly status?: HostStatusPort;
+    readonly shortcuts?: HostShortcutsPort;
+    readonly renderers?: HostRenderersPort;
+    readonly themes?: HostThemesPort;
+    readonly toast?: HostToastPort;
+    readonly commandTrees?: HostCommandTreesPort;
+    readonly decisions?: HostDecisionsPort;
+    readonly channel?: HostChannelPort;
+}
+/** Build the immutable facade from already-composed slice implementations. */
+export declare function createHostFacade(ports: HostFacadePorts): HostFacade;
+/**
+ * Build a HostFacade whose descriptor and every mounted Host Port method are
+ * wrapped with the unified shadow-policy assertion. This is what the Kernel
+ * exposes to internal TUI callers: no Port method can silently perform a
+ * mutate/register/subscribe side effect in passive/replay production modes.
+ */
+export declare function createShadowGuardedHostFacade(ports: HostFacadePorts, mode: AdapterMode): HostFacade;
+//# sourceMappingURL=host-facade.d.ts.map

package/lib/types/adapter/kernel/host-facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-facade.d.ts","sourceRoot":"","sources":["../../../../src/adapter/kernel/host-facade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,oBAAoB,EACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAA;AAGrB,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CACnC;AAmJD,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CAgBnE;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CA2BnG"}

package/lib/types/adapter/kernel/host-facade.js

@@ -0,0 +1,215 @@
+/**
+ * HostFacade: thin composition / identity entry over mounted Host Ports.
+ *
+ * P2 callers normally obtain this from `KernelRuntime.facade()`, which backs
+ * the descriptor port with the unified kernel lifecycle evidence.
+ * `facadeFromLegacy` remains only as a long-term compatibility fallback for
+ * bare/test compositions (outside P6 removal scope; owner: dsh-tui adapter).
+ * Hard rules:
+ * - It performs no business logic, no protocol translation, no capability
+ *   detection, no registry, and stores no mutable host state.
+ * - It is for TUI host-internal code only. External plugins continue to use
+ *   dsh-std / dsh-ecosystem-spec public protocol surfaces.
+ * - It only exposes Host Ports; admission, permission evaluation and ledger
+ *   writes are Kernel/Standard internal services and must never be exposed
+ *   as ordinary Host Ports.
+ */
+import { assertShadowPolicy, effectClassFor, } from './runtime.js';
+import { CHANNEL_PORT_METHOD_CAPABILITIES as CHANNEL_PORT_CAPABILITIES } from '../channel/features.js';
+/**
+ * Per-method shadow-policy capabilities for mounted Host Ports.
+ *
+ * Every method on a mounted Port is guarded by the Kernel effect matrix. This
+ * is the last line of defense after `KernelRuntime.mount()` has already
+ * rejected whole drivers whose mountEffectClass is not allowed in a shadow
+ * mode: even a read-only-mounted Port cannot silently execute a mutate /
+ * register / subscribe method while the runtime is passive/replay-shadow.
+ */
+const PORT_METHOD_CAPABILITIES = Object.freeze({
+    presentation: Object.freeze({
+        ask: 'host.presentation.ask',
+        approve: 'host.presentation.approve',
+        dialog: 'host.presentation.dialog',
+    }),
+    workspace: Object.freeze({
+        list: 'host.workspaces.list',
+        resolve: 'host.workspaces.resolve',
+        describe: 'host.workspaces.describe',
+        commandShell: 'host.workspaces.commandShell',
+        rename: 'host.workspaces.rename',
+        commands: 'host.workspaces.commands',
+        runCommand: 'host.workspaces.runCommand',
+    }),
+    scenes: Object.freeze({
+        register: 'host.scenes.register',
+        list: 'host.scenes.list',
+        open: 'host.scenes.open',
+        close: 'host.scenes.close',
+        active: 'host.scenes.active',
+        subscribe: 'host.scenes.subscribe',
+    }),
+    settings: Object.freeze({
+        register: 'host.settings.register',
+        list: 'host.settings.list',
+        section: 'host.settings.section',
+        subscribe: 'host.settings.subscribe',
+    }),
+    status: Object.freeze({
+        set: 'host.status.set',
+        snapshot: 'host.status.snapshot',
+        subscribe: 'host.status.subscribe',
+    }),
+    shortcuts: Object.freeze({
+        register: 'host.shortcuts.register',
+        list: 'host.shortcuts.list',
+        dispatch: 'host.shortcuts.dispatch',
+    }),
+    renderers: Object.freeze({
+        register: 'host.renderers.register',
+        render: 'host.renderers.render',
+    }),
+    themes: Object.freeze({
+        register: 'host.themes.register',
+        snapshot: 'host.themes.snapshot',
+        resolve: 'host.themes.resolver',
+        subscribe: 'host.themes.subscribe',
+    }),
+    toast: Object.freeze({
+        show: 'host.toast.show',
+    }),
+    commandTrees: Object.freeze({
+        register: 'host.command-trees.register',
+        children: 'host.command-trees.children',
+        descriptions: 'host.command-trees.descriptions',
+    }),
+    decisions: Object.freeze({
+        probe: 'host.decision.probe',
+        subscribe: 'host.decision.subscribe',
+    }),
+});
+function assertPortMethod(mode, capability) {
+    const effectClass = effectClassFor(capability);
+    if (effectClass === undefined) {
+        throw new Error(`dsh-tui: Host Port method has no registered effect class: ${capability}`);
+    }
+    assertShadowPolicy(effectClass, mode);
+}
+function wrapPort(port, portName, mode) {
+    const capabilities = PORT_METHOD_CAPABILITIES[portName];
+    if (capabilities === undefined) {
+        throw new Error(`dsh-tui: no shadow-policy map for Host Port "${portName}"`);
+    }
+    const wrapped = {};
+    for (const key of Object.keys(port)) {
+        const capability = capabilities[key];
+        if (capability === undefined) {
+            throw new Error(`dsh-tui: Host Port "${portName}" method "${key}" is missing from the shadow-policy map`);
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(port, key);
+        if (descriptor?.get !== undefined) {
+            Object.defineProperty(wrapped, key, {
+                enumerable: true,
+                get() {
+                    assertPortMethod(mode, capability);
+                    return descriptor.get.call(port);
+                },
+            });
+        }
+        else {
+            const original = port[key];
+            if (typeof original === 'function') {
+                wrapped[key] = function (...args) {
+                    assertPortMethod(mode, capability);
+                    return Reflect.apply(original, port, args);
+                };
+            }
+            else {
+                wrapped[key] = original;
+            }
+        }
+    }
+    return Object.freeze(wrapped);
+}
+function wrapChannelPort(port, mode) {
+    const wrapped = {};
+    for (const subName of Object.keys(port)) {
+        const subPort = port[subName];
+        if (subPort === undefined)
+            continue;
+        const capabilities = CHANNEL_PORT_CAPABILITIES[subName];
+        if (capabilities === undefined) {
+            throw new Error(`dsh-tui: Host Channel sub-port "${subName}" is missing from the shadow-policy map`);
+        }
+        const subWrapped = {};
+        for (const key of Object.keys(subPort)) {
+            const capability = capabilities[key];
+            if (capability === undefined) {
+                throw new Error(`dsh-tui: Host Channel "${subName}" method "${key}" is missing from the shadow-policy map`);
+            }
+            const original = subPort[key];
+            if (typeof original === 'function') {
+                subWrapped[key] = function (...args) {
+                    assertPortMethod(mode, capability);
+                    return Reflect.apply(original, subPort, args);
+                };
+            }
+            else {
+                subWrapped[key] = original;
+            }
+        }
+        wrapped[subName] = Object.freeze(subWrapped);
+    }
+    return Object.freeze(wrapped);
+}
+/** Build the immutable facade from already-composed slice implementations. */
+export function createHostFacade(ports) {
+    return Object.freeze({
+        descriptor: ports.descriptor,
+        ...(ports.presentation === undefined ? {} : { presentation: ports.presentation }),
+        ...(ports.workspace === undefined ? {} : { workspace: ports.workspace }),
+        ...(ports.scenes === undefined ? {} : { scenes: ports.scenes }),
+        ...(ports.settings === undefined ? {} : { settings: ports.settings }),
+        ...(ports.status === undefined ? {} : { status: ports.status }),
+        ...(ports.shortcuts === undefined ? {} : { shortcuts: ports.shortcuts }),
+        ...(ports.renderers === undefined ? {} : { renderers: ports.renderers }),
+        ...(ports.themes === undefined ? {} : { themes: ports.themes }),
+        ...(ports.toast === undefined ? {} : { toast: ports.toast }),
+        ...(ports.commandTrees === undefined ? {} : { commandTrees: ports.commandTrees }),
+        ...(ports.decisions === undefined ? {} : { decisions: ports.decisions }),
+        ...(ports.channel === undefined ? {} : { channel: ports.channel }),
+    });
+}
+/**
+ * Build a HostFacade whose descriptor and every mounted Host Port method are
+ * wrapped with the unified shadow-policy assertion. This is what the Kernel
+ * exposes to internal TUI callers: no Port method can silently perform a
+ * mutate/register/subscribe side effect in passive/replay production modes.
+ */
+export function createShadowGuardedHostFacade(ports, mode) {
+    const descriptor = Object.freeze({
+        get generationId() {
+            assertShadowPolicy('read-only', mode);
+            return ports.descriptor.generationId;
+        },
+        snapshot() {
+            assertShadowPolicy('read-only', mode);
+            return ports.descriptor.snapshot();
+        },
+    });
+    const wrapped = {
+        descriptor,
+        ...(ports.presentation === undefined ? {} : { presentation: wrapPort(ports.presentation, 'presentation', mode) }),
+        ...(ports.workspace === undefined ? {} : { workspace: wrapPort(ports.workspace, 'workspace', mode) }),
+        ...(ports.scenes === undefined ? {} : { scenes: wrapPort(ports.scenes, 'scenes', mode) }),
+        ...(ports.settings === undefined ? {} : { settings: wrapPort(ports.settings, 'settings', mode) }),
+        ...(ports.status === undefined ? {} : { status: wrapPort(ports.status, 'status', mode) }),
+        ...(ports.shortcuts === undefined ? {} : { shortcuts: wrapPort(ports.shortcuts, 'shortcuts', mode) }),
+        ...(ports.renderers === undefined ? {} : { renderers: wrapPort(ports.renderers, 'renderers', mode) }),
+        ...(ports.themes === undefined ? {} : { themes: wrapPort(ports.themes, 'themes', mode) }),
+        ...(ports.toast === undefined ? {} : { toast: wrapPort(ports.toast, 'toast', mode) }),
+        ...(ports.commandTrees === undefined ? {} : { commandTrees: wrapPort(ports.commandTrees, 'commandTrees', mode) }),
+        ...(ports.decisions === undefined ? {} : { decisions: wrapPort(ports.decisions, 'decisions', mode) }),
+        ...(ports.channel === undefined ? {} : { channel: wrapChannelPort(ports.channel, mode) }),
+    };
+    return createHostFacade(wrapped);
+}

package/lib/types/adapter/kernel/host-probe-access.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Host-only live-probe access.
+ *
+ * The reversible live probes used by the Kernel's driver are deliberately not
+ * methods on the plugin-visible Cordis services. A plugin can obtain
+ * `ctx.tuiPluginStorage`, `ctx.tuiMessageObserver` or `ctx.tuiPluginHost` and
+ * call ordinary public methods, but it cannot discover a `probeReversible`
+ * method from the normal package export surface.
+ *
+ * IMPORTANT trust boundary:
+ *
+ * This module is NOT a security boundary. dsh-TUI's plugin model is
+ * trusted-in-process; any code running in the same process can locate the
+ * package root through `package.json` and absolutely import the compiled
+ * internal file (for example `lib/adapter/kernel/host-probe-access.js`).
+ * The package `exports` map blocks ordinary deep imports, but it cannot stop
+ * same-process absolute-path loading. The host-only token and registration
+ * functions therefore exist to prevent accidental public-API pollution and
+ * obvious misuse, not to defend against a malicious in-process plugin.
+ *
+ * Hardening choices:
+ * - `HOST_PROBE_TOKEN` is a module-local symbol and is NOT exported from this
+ *   module or from any package public entry.
+ * - The registration functions refuse to replace an existing host runner on a
+ *   concrete service, so an in-process caller cannot overwrite the real probe
+ *   with a fake one after the host has bootstrapped.
+ * - The run functions accept an optional token only for backwards-compatible
+ *   calling conventions; when no token is supplied they still execute the
+ *   registered host runner. They are internal module functions, not package
+ *   public API.
+ */
+export interface CommandLiveProbeResult {
+    readonly ok: true;
+    readonly name: string;
+    readonly lifecycleAppends: number;
+}
+export interface StorageLiveProbeResult {
+    readonly service: 'tuiPluginStorage';
+    readonly ok: true;
+    readonly operations: readonly string[];
+    readonly tempNamespace: string;
+}
+export interface MessageLiveProbeResult {
+    readonly service: 'tuiMessageObserver';
+    readonly ok: true;
+    readonly before: number;
+    readonly during: number;
+    readonly after: number;
+    readonly delivered: number;
+}
+type CommandRunner = (token?: unknown) => Promise<CommandLiveProbeResult>;
+type StorageRunner = (token?: unknown) => Promise<StorageLiveProbeResult>;
+type MessageRunner = (token?: unknown) => Promise<MessageLiveProbeResult>;
+/**
+ * Register a live-probe runner for a concrete host service.
+ *
+ * If a runner is already registered for the same unwrapped service, the call
+ * is a no-op: the host bootstrap owns the WeakMap slot and an in-process
+ * caller must not be able to replace a real probe with a forged runner.
+ */
+export declare function registerCommandLiveProbe(service: object, runner: CommandRunner): void;
+export declare function registerStorageLiveProbe(service: object, runner: StorageRunner): void;
+export declare function registerMessageLiveProbe(service: object, runner: MessageRunner): void;
+export declare function hasCommandLiveProbe(service: unknown): boolean;
+export declare function hasStorageLiveProbe(service: unknown): boolean;
+export declare function hasMessageLiveProbe(service: unknown): boolean;
+export declare function runCommandLiveProbe(service: unknown, token?: unknown): Promise<CommandLiveProbeResult>;
+export declare function runStorageLiveProbe(service: unknown, token?: unknown): Promise<StorageLiveProbeResult>;
+export declare function runMessageLiveProbe(service: unknown, token?: unknown): Promise<MessageLiveProbeResult>;
+export {};
+//# sourceMappingURL=host-probe-access.d.ts.map

package/lib/types/adapter/kernel/host-probe-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-probe-access.d.ts","sourceRoot":"","sources":["../../../../src/adapter/kernel/host-probe-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAKH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAuBD,KAAK,aAAa,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;AACzE,KAAK,aAAa,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;AACzE,KAAK,aAAa,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;AAMzE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAGrF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAGrF;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAGrF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAG7D;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAG7D;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAG7D;AAQD,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAM5G;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAM5G;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAM5G"}

package/lib/types/adapter/kernel/host-probe-access.js

@@ -0,0 +1,121 @@
+/**
+ * Host-only live-probe access.
+ *
+ * The reversible live probes used by the Kernel's driver are deliberately not
+ * methods on the plugin-visible Cordis services. A plugin can obtain
+ * `ctx.tuiPluginStorage`, `ctx.tuiMessageObserver` or `ctx.tuiPluginHost` and
+ * call ordinary public methods, but it cannot discover a `probeReversible`
+ * method from the normal package export surface.
+ *
+ * IMPORTANT trust boundary:
+ *
+ * This module is NOT a security boundary. dsh-TUI's plugin model is
+ * trusted-in-process; any code running in the same process can locate the
+ * package root through `package.json` and absolutely import the compiled
+ * internal file (for example `lib/adapter/kernel/host-probe-access.js`).
+ * The package `exports` map blocks ordinary deep imports, but it cannot stop
+ * same-process absolute-path loading. The host-only token and registration
+ * functions therefore exist to prevent accidental public-API pollution and
+ * obvious misuse, not to defend against a malicious in-process plugin.
+ *
+ * Hardening choices:
+ * - `HOST_PROBE_TOKEN` is a module-local symbol and is NOT exported from this
+ *   module or from any package public entry.
+ * - The registration functions refuse to replace an existing host runner on a
+ *   concrete service, so an in-process caller cannot overwrite the real probe
+ *   with a fake one after the host has bootstrapped.
+ * - The run functions accept an optional token only for backwards-compatible
+ *   calling conventions; when no token is supplied they still execute the
+ *   registered host runner. They are internal module functions, not package
+ *   public API.
+ */
+/** Opaque host-only token. Module-local; deliberately not exported. */
+const HOST_PROBE_TOKEN = Symbol('dsh-tui.host-probe-token');
+/** The Cordis traceable-proxy unwrap marker used by the host-access module. */
+const CORDIS_ORIGINAL = Symbol.for('cordis.original');
+function unwrapService(service) {
+    if (service === null || typeof service !== 'object')
+        return undefined;
+    let current = service;
+    const seen = new WeakSet();
+    while (!seen.has(current)) {
+        seen.add(current);
+        let original;
+        try {
+            original = Reflect.get(current, CORDIS_ORIGINAL);
+        }
+        catch {
+            break;
+        }
+        if (original === null || typeof original !== 'object' || original === current)
+            break;
+        current = original;
+    }
+    return current;
+}
+const commandRunners = new WeakMap();
+const storageRunners = new WeakMap();
+const messageRunners = new WeakMap();
+/**
+ * Register a live-probe runner for a concrete host service.
+ *
+ * If a runner is already registered for the same unwrapped service, the call
+ * is a no-op: the host bootstrap owns the WeakMap slot and an in-process
+ * caller must not be able to replace a real probe with a forged runner.
+ */
+export function registerCommandLiveProbe(service, runner) {
+    const key = unwrapService(service) ?? service;
+    if (!commandRunners.has(key))
+        commandRunners.set(key, runner);
+}
+export function registerStorageLiveProbe(service, runner) {
+    const key = unwrapService(service) ?? service;
+    if (!storageRunners.has(key))
+        storageRunners.set(key, runner);
+}
+export function registerMessageLiveProbe(service, runner) {
+    const key = unwrapService(service) ?? service;
+    if (!messageRunners.has(key))
+        messageRunners.set(key, runner);
+}
+export function hasCommandLiveProbe(service) {
+    const key = unwrapService(service);
+    return key !== undefined && commandRunners.has(key);
+}
+export function hasStorageLiveProbe(service) {
+    const key = unwrapService(service);
+    return key !== undefined && storageRunners.has(key);
+}
+export function hasMessageLiveProbe(service) {
+    const key = unwrapService(service);
+    return key !== undefined && messageRunners.has(key);
+}
+function assertOptionalHostToken(token) {
+    if (token !== undefined && token !== HOST_PROBE_TOKEN) {
+        throw new Error('dsh-tui: host-only live probe access denied');
+    }
+}
+export async function runCommandLiveProbe(service, token) {
+    assertOptionalHostToken(token);
+    const key = unwrapService(service);
+    const runner = key === undefined ? undefined : commandRunners.get(key);
+    if (runner === undefined)
+        throw new Error('dsh-tui: host command live probe accessor is not registered');
+    return runner(token);
+}
+export async function runStorageLiveProbe(service, token) {
+    assertOptionalHostToken(token);
+    const key = unwrapService(service);
+    const runner = key === undefined ? undefined : storageRunners.get(key);
+    if (runner === undefined)
+        throw new Error('dsh-tui: host storage live probe accessor is not registered');
+    return runner(token);
+}
+export async function runMessageLiveProbe(service, token) {
+    assertOptionalHostToken(token);
+    const key = unwrapService(service);
+    const runner = key === undefined ? undefined : messageRunners.get(key);
+    if (runner === undefined)
+        throw new Error('dsh-tui: host message live probe accessor is not registered');
+    return runner(token);
+}

package/lib/types/adapter/kernel/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Adapter Kernel.
+ *
+ * P1 provided the read-only skeleton. P2 adds:
+ * - a minimal real `KernelRuntime` (driver registration/mount, detection,
+ *   declared → staged → live, diagnostics);
+ * - reversible live probes for Command / LocalStorage / MessageObserver;
+ * - passive/replay harness support in `replay.ts`.
+ * P3 adds per-capability kernel slices and mounted Host Ports.
+ */
+export * from './runtime.js';
+export * from './lifecycle.js';
+export * from './host-facade.js';
+export * from './kernel-runtime.js';
+export * from './diagnostics.js';
+export * from './ledger.js';
+export * from './legacy-facade.js';
+export * from './replay.js';
+export * from './slices/index.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/types/adapter/kernel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapter/kernel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,cAAc,CAAA;AAC5B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA"}

package/lib/types/adapter/kernel/index.js

@@ -0,0 +1,19 @@
+/**
+ * Adapter Kernel.
+ *
+ * P1 provided the read-only skeleton. P2 adds:
+ * - a minimal real `KernelRuntime` (driver registration/mount, detection,
+ *   declared → staged → live, diagnostics);
+ * - reversible live probes for Command / LocalStorage / MessageObserver;
+ * - passive/replay harness support in `replay.ts`.
+ * P3 adds per-capability kernel slices and mounted Host Ports.
+ */
+export * from './runtime.js';
+export * from './lifecycle.js';
+export * from './host-facade.js';
+export * from './kernel-runtime.js';
+export * from './diagnostics.js';
+export * from './ledger.js';
+export * from './legacy-facade.js';
+export * from './replay.js';
+export * from './slices/index.js';